Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xi-zhao/OpenQuantum --skill quantum-information-auditgit clone --depth 1 https://github.com/xi-zhao/OpenQuantumWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xi-zhao/openquantum/quantum-information-audit)<a href="https://agentmods.dev/skills/xi-zhao/openquantum/quantum-information-audit"><img src="https://agentmods.dev/badge/skills/xi-zhao/openquantum/quantum-information-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xi-zhao/openquantum/quantum-information-audit"><img src="https://agentmods.dev/badge/skills/xi-zhao/openquantum/quantum-information-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00099 | $0.01133 |
| Opus 5.5 | $0.00040 | $0.00453 |
| Sonnet 5.5 | $0.00020 | $0.00227 |
| Haiku 4.5 | $0.00010 | $0.00113 |
Grade A, and why
quantum-information-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 61 lines — stays where its author put it; the contents beside it link to each section on GitHub.
量子信息审计
原生 SDK 路径
本能力同时支持 toqito 的原生公开 API。用户需要 态、信道、矩阵、熵、纠缠、态区分与优化接口 时，由 Agent 在固定依赖环境中编写和运行任务代码，不限于下文便捷 Tool 的预设模型。
使用 node scripts/sdk-access.mjs inspect quantum-information-audit 定位环境，按完整 SDK 工作流执行。模块导航：toqito；导航不是 API 白名单。
下文关于模型、门集、输入与预算的限制描述便捷 Tool 的合同；原生 SDK 另受上游版本、可选依赖、宿主资源与用户授权约束。已禁用或被拒绝的动作不能借代码路径绕过。执行状态和科研验收分别报告。
核心边界
本能力只审计用户已经给出的密度矩阵。核心对象是版本化的审计请求：复矩阵的实部/虚部、子系统维数，以及需要做部分转置的子系统索引。
toqitoMCP-exposed Tool 产生数值事实。- OpenQuantum Validator 用独立 JavaScript 实现重算迹、Hermiticity、正半定性、纯度、部分转置谱和 negativity。
- MCP-exposed Tool 的结果标记
observations_available，不等于最终科学验收。只有物化 Result Package 并核对 Session Event Log 来源链后，才可能形成最终 Acceptance。
工作流
- 确认矩阵总维数等于
subsystemDimensions的乘积。 - 明确
transposeSubsystems采用从 0 开始的子系统索引，并且是非空真子集。 - 调用
audit_density_matrix。复矩阵用matrixReal和可选的matrixImag表示；未给虚部时按全零处理。主动作加载固定环境并返回packageVersion，依赖须显式准备；缺失或旧锁环境返回准备命令，不在 Tool 中安装。 - 分栏报告实际包版本及：
- toqito 事实；
- 独立 Validator observations；
- 失败、不检查项和适用范围。
- 确认
tool/result是否包含acceptance_available与 Result Commit；只有可信 Host Plugin 通过 内部 Scientific Result Adapter 进入 Materializer，并完成物化、重读和校验时，才能按 central Acceptance Builder 推导的状态报告最终验收。 - DSH 物化成功时交付
readable-report.md、Acceptance Report 和 Result Commit 的路径。可读报告由重读后的证据生成，不依赖模型最终说明；只读会话不能写报告，也不能因此宣称验收完成。 - 不把 negativity 写成普适的纠缠分类结论；它只对应本次指定的二分和部分转置判据。
必须保持的规则
- 不提交云任务或真实量子硬件任务。
- 不接受调用方自定义容差；容差由版本化 Acceptance Profile 固定。
provenance.complete=not_checked时不得宣称科学验收通过。- 不凭 MCP-exposed Tool 的文本内容自行推断
passed；最终状态必须来自 Harness 物化后的 Acceptance Report。 - 工具失败、科学 observation 失败、来源链未检查是三种不同状态。
- 不从分子结构、实验层析数据或任意量子信道自动推导密度矩阵。
示例
Bell 态 |Phi+><Phi+| 使用 subsystemDimensions=[2,2]、transposeSubsystems=[0]。预期纯度为 1、部分转置最小本征值为 -0.5、negativity 为 0.5；仍需以实际工具事实和 Validator observations 为准。
密度矩阵维数、子系统分解与待转置子区由调用方选择，适配器不额外设置人工规模上限。具体资源配置见本地计算说明。
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- acceptance-profiles/density-matrix-audit-v1.json 2.5 KB
- agents/openai.yaml 455 B
- artifacts/state-analysis.schema.json 2.1 KB
- artifacts/validation-bundle.schema.json 941 B
- capability.yaml 3.1 KB
- core/render-report.mjs 3.0 KB runs code
- evals/run-evals.mjs 5.9 KB runs code
- evals/suite.json 1.2 KB
- inputs/request.schema.json 1009 B
- mcp/bridge.py 5.5 KB runs code
- mcp/request_digest.py 1.3 KB runs code
- mcp/server.mjs 6.2 KB runs code
- pyproject.toml 165 B
- references/REQUEST-DIGEST.md 1.6 KB
- reproduction-profiles/local-toqito-js-replay-v1.json 1.8 KB
- test/mcp.test.mjs 5.8 KB runs code
- uv.lock 231 KB
- validators/state-math.mjs 11 KB runs code
- validators/validate-state-analysis.mjs 11 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +1 lines 4c35585aa189
- 15d ago Changed · +11 lines d0bd3836f449
- 1mo ago Changed · +4 lines 0d6498595c26
- 1mo ago Changed · +2 lines · -2 tokens per session dba3e8d8ae36
- 1mo ago Changed · -1 lines f1c3a580d446
- 1mo ago First seen · 44 lines · 101 tokens per session scan A 056f71a0dbc7
quantum-information-audit is a skill published in the GitHub repository xi-zhao/OpenQuantum (71 stars, last pushed today), licensed MIT. It adds 99 tokens to every session and 1,133 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
academic-research
Search academic papers, scholarly articles, and research publications through SandBase. Use when asked for literature review, academic citations, scholarly research, paper discovery, or scientific evidence gathering.
arxiv-guide
Resolve citations to arXiv IDs, find an author's papers, follow a paper's versions, and read long papers section by section with the arxiv tools. Use when a task needs arXiv preprints found by citation (author-year, CoRR abs/ refs, arXiv DOIs), author, category, or date, or needs a paper's full text.
rhylthyme
Schedule multi-step procedures that a person carries out against a clock, with parallel tracks, shared equipment and steps that end when the person says so. Use when turning a lab protocol, recipe, event run sheet or workout into a timed plan; when several procedures must share one instrument (one centrifuge, one…
memory-search-mcp
Long-term memory and context retrieval for AI agents. Semantic search across conversation history with care-weighted relevance.
gc-minimal-zine-poster-v0-3
Generate or analyze poetic paper-texture minimal zine posters with large negative space, a small editorial collage or focal element, experimental typography, and one clear color accent. Use when the user gives a theme, sentence, article, mood, object, photo, content brief, reference images, or an image folder and…
ask-sonner
Guide to Sonner, the React toast library — install and wire up the Toaster, pick the right toast() call, promise and loading toasts, updating, dismissing and persisting toasts, styling, theming and icons, positioning and multiple toasters. Use when working with Sonner or troubleshooting it — toasts that don't appear…